Tweaks to user updating of password